[HDFS-5688] Wire-encription in QJM

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Cannot Reproduce
• Affects Version/s: 2.2.0
• Component/s: ha, journal-node, security
• Labels: security
• Assignee: Unassigned
• Reporter: Juan Carlos Fernandez
• Created: 19/Dec/13 16:05
• Updated: 05/Mar/15 15:45
• Resolved: 05/Mar/15 15:45

Description

When HA is implemented with QJM and using kerberos, it's not possible to set wire-encrypted data.
If it's set property hadoop.rpc.protection to something different to authentication it doesn't work propertly, getting the error:

ERROR security.UserGroupInformation: PriviledgedActionException as:principal@REALM (auth:KERBEROS) cause:javax.security.sasl.SaslException: No common protection layer between client and ser

With NFS as shared storage everything works like a charm